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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS. 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 
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Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent temi adjustment. See 37 CFR 1.704(b). 

Status 

1 )I3 Responsive to communication(s) filed on 02 October 2003 . 
2a)\3 This action is FINAL. 2b)ISI This action is non-final. 

3) 0 Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 
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4) ^ Claim(s) 1^5 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) ^ Claim(s) f^S is/are rejected. 

7) ^ Claim(s) 2 is/are objected to. 

8) n Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) n The specification is objected to by the Examiner. 

10) S The drawing(s) filed on 02 October 2003 is/are: a)KI accepted or b)^ objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) 0 The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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application from the International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 
Priority 

1 . Receipt is acknowledged of papers submitted under 35 U.S.C. 1 19(a)-(d), which 
papers have been placed of record in the file. 



Claim Objections 

2. Claim 2 is objected to because of the following informalities: Claim 2, line 6-7, 
should read, "when said user sends subsequent requests for the URL of the said 
content server, even if said content server does not belong in the said proxy server's 
domain" not "when said user sends other requests for a same URL even if said content 
server does not belong to a same domain as said". 

Appropriate correction is required. 

Claim Rejections - 35 USC §112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

3. Claim 5 is rejected under 35 U.S.C. 112, second paragraph. The claim element 
that does not include the phrase "means for" or "step for" will not be considered to 
invoke 35 U.S.C. 112, sixth paragraph. If applicant wishes to have the claim limitation 
treated under 35 U.S.C. 112, sixth paragraph, applicant must either amend the claim to 
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include the phrase "means for" or "step for," or show that even though the phrase 
"means for" or "step for" is not used, the claim limitation is written as a function to be 
performed and does not recite sufficient structure, material, or acts which would 
preclude application of 35 U.S.C. 112. sixth paragraph. [See MPEP 2181] 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form 
the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b). by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351 (a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

4. Claims 1, 3 & 4 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Brown et al. (US Patent NO. 697091 8B2 here after "Brown et al."). 

The applied reference has a common assignee with the instant application. 
Based upon the earlier effective U.S. filing date of the reference, It constitutes prior art 
under 35 U.S.C. 102(e). This rejection under 35 U.S.C. 102(e) might be overcome 
either by a showing under 37 CFR 1 .132 that any invention disclosed but not claimed in 
the reference was derived from the inventor of this application and is thus not the 
invention "by another," or by an appropriate showing under 37 CFR 1 .1 31 . 
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5. Regarding Claim 1 Brown et al. disclose, Method of accessing Internet resources 
provided by at least a content server (col. 3, line 51 & Fig 2a, 16) in a data 
transmission system including a proxy (col. 3, line 55 & Fig 2a, 11) connected to an 
Internet network (col. 3, line 50 & Fig 2a, 14), said proxy being provided with 
authentication means (col. 4, line 23 & Fig 3, 20) for authenticating a user when 
receiving a request for Internet resources (col. 4, line 18) therefrom, and wherein said 
proxy transmits the user request to said content server (col. 4, lines 3-8 & 29-30) which 
sends back a response to the proxy together with at least one cookie containing 
information about said user (coi. 4, lines 30-32); 

said proxy receiving and storing said response in a user context database (col. 
4, lines 32-33 & Fig 3, User Database 22) and transmitting said response to said user 
(col. 6, line 37) after said cookie has been removed from said response (col. 6, lines 
29-31), so that said user can send all subsequent requests for accessing said Internet 
resources contained in said content server to said proxy (col. 7, lines 36-41). 

6. Regarding Claim 3, Brown et al. disclose, the Method according to claim 1 , 
wherein said cookie which has been stored in said user context database is added to all 
subsequent requests from said user for accessing Internet resources in said content 
server (col. 5, lines. 17-27). 
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7. Regarding Claim 4 Brown et al. disclose, Method according to claim 3, wherein 
the response from said content server to said proxy includes a statement "set-cookies," 
said statement being removed from said response (col. 6, lines 29-31) before 
transmitting said response to said user (col. 6, line 37). 



Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which fomis the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 



The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness 
under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 



8. Claims 2 is rejected under 35 U.S.C. 103(a) as being obvious over Brown et al. 
as applied to claims 1 above, and in view of Admitted Prior Art. 
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The applied reference has a common assignee with the instant application. 
Based upon the earlier effective U.S. filing date of the reference, it constitutes prior art 
only under 35 U.S.C. 102(e). This rejection under 35 U.S.C. 103(a) might be overcome 
by: (1 ) a showing under 37 CFR 1 .1 32 that any invention disclosed but not claimed in 
the reference was derived from the inventor of this application and is thus not an 
invention "by another"; (2) a showing of a date of invention for the claimed subject 
matter of the application which corresponds to subject matter disclosed but not claimed 
in the reference, prior to the effective U.S. filing date of the reference under 37 CFR 
1 .1 31 ; or (3) an oath or declaration under 37 CFR 1 .1 30 stating that the application and 
reference are currently owned by the same party and that the inventor named in the 
application is the prior inventor under 35 U.S.C. 104, together with a terminal disclaimer 
in accordance with 37 CFR 1 .321(c). This rejection might also be overcome by showing 
that the reference is disqualified under 35 U.S.C. 103(c) as prior art in a rejection under 
35 U.S.C. 1 03(a). See MPEP § 706.02(l)(1 ) and § 706.02(l)(2). 

9. Regarding Claim 2, Brown et al. disclose the Method according to claim 1 , 
wherein said proxy is configured as a proxy establishing a connection to said content 
server on behalf of said user when receiving said request from said user, and wherein 
said cookie is transmitted by said proxy to said content server when said user sends 
other requests for a same URL even if said content server does not belong to a same 
domain as said reverse proxy. 
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1 0. Brown et al. do not disclose, reverse proxy. 

11. In the same field of endeavor, Admitted Prior Art teach, (page 2, 2"^ paragraph, 
lines 14-25, A proxy can be configured as "reverse proxy" In order to add more 
security and to protect in an efficient way the back-end Web services. In such a 
case, the proxy appears to the client to be the destination content server. To the 
content server, the reverse proxy server acts as the originator of client requests. 
If a client wants to access a file, for example main.html, he/she points its browser 
to the reverse proxy, www.DomainA.com believing this is the Internet address of 
the content server. The reverse proxy server will accept the client request for 
main.html, retrieves the requested page from the content server residing on 
w3.DomainB.com, and returns it to the client). 

12. It would have been obvious to one of ordinary skill in the art at the time of 
applicant's invention to modify Brown et al. by including the reverse proxy of the 
Admitted Prior Art, to add more security and to protect the back-end Web services in an 
efficient way. Additional security along with back-end Web services protection would 
make it more difficult for hackers to gain unauthorized access to sensitive user 
information as well as unauthorized access to Web services. 
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Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. Shi et al. (US Patent No. 5875296A) teach Distributed file 
system web server user authentication with cookies, Fulton et al. (US PG Pub No. 
2002001 0865A1) teach Method and apparatus for remote office access management. 

Any inquiry conceming this communication or earlier communications from the 
examiner should be directed to Saeed S. Mirzadegan whose telephone number is 571- 
270-3044. The examiner can nonnally be reached on M-F 8:00-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Patrick Assouad can be reached on 571-272-2210. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status Information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status Information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated Information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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